Medium · 4.8 CVE-2021-41948 EUVD-2022-1776GHSA-jv64-2m3x-6v4q

Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

Published Apr 29, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List of subjects".

Ecosystem	Package	Affected	Fixed	Record
Packagist	intelliants/subrion	<= 4.2.1	—	GHSA-jv64-2m3x-6v4q